manager: allow viewing admin role of a role (#77243)

@@ -57,0 +71,4 @@
+    def clean_phone(self):
+        phone = self.cleaned_data['phone']
+        if (
+            qs := models.AttributeValue.objects.with_owner(self.user).filter(

@@ -57,0 +72,4 @@
+        phone = self.cleaned_data['phone']
+        if (
+            qs := models.AttributeValue.objects.with_owner(self.user).filter(
+                attribute=utils_misc.get_password_authenticator().phone_identifier_field

@@ -57,0 +89,4 @@
+
+    def save(self):
+        """
+        Generates eithera code sent by SMS which the user needs to input in order to confirm phone change.

@@ -119,6 +120,8 @@ class EditProfile(HomeURLMixin, cbv.HookMixin, cbv.TemplateNamesMixin, UpdateVie
                 if attribute.user_editable:
                     editable_profile_fields.append(field)
         attributes = models.Attribute.objects.filter(user_editable=True)
+        if (authn := utils_misc.get_password_authenticator()) and authn.phone_identifier_field:

@@ -255,0 +253,4 @@
+    template_names = ['profiles/email_change.html', 'authentic2/change_email.html']
+    title = _('Email Change')
+    success_url = '..'
+    reauthn_message = (_('You must re-authenticate to change your email address.'),)

@@ -278,0 +320,4 @@
+    def form_valid(self, form):
+        phone = form.cleaned_data.get('phone')
+
+        # TODO handle multiple SMS warning message

@@ -278,0 +368,4 @@
+            return utils_misc.redirect(self.request, reverse('auth_homepage'))
+        old_phone = ''
+        if (
+            qs := models.AttributeValue.objects.with_owner(self.request.user).filter(

@@ -278,0 +392,4 @@
+    @atomic(savepoint=False)
+    def get(self, request, *args, **kwargs):
+        token = kwargs['token'].replace(' ', '')
+        if token:

@@ -1379,0 +1584,4 @@
+                duration=120,
+            )
+        except Lock.Error:
+            request = StoreRequestMiddleware.get_request()

@@ -57,0 +76,4 @@
+            .filter(attribute=self.authenticator.phone_identifier_field)
+            .values_list('content', flat=True)
+        )
+        if atvs and phone == atvs[0]:

@@ -232,0 +232,4 @@
+        if not self.can_validate_with_password() and not self.has_recent_authentication():
+            return self.reauthenticate(
+                action='email-change',
+                message=self.reauthn_message,

@@ -276,2 +286,4 @@
 
 
+class PhoneChangeView(HomeURLMixin, IdentifierChangeMixin, cbv.TemplateNamesMixin, FormView):
+    template_names = ['profiles/phone_change.html', 'authentic2/change_phone.html']

@@ -278,0 +309,4 @@
+            content__isnull=False,
+        )
+        if atvs:
+            ctx['phone'] = atvs.first().to_python()

@@ -278,0 +312,4 @@
+            ctx['phone'] = atvs.first().to_python()
+        ctx['allow_phone_change'] = getattr(
+            self.authenticator.phone_identifier_field, 'user_editable', False
+        ) and not getattr(self.authenticator.phone_identifier_field, 'disabled', True)

@@ -278,0 +316,4 @@
+        return ctx
+
+    def get_success_url(self):
+        if not self.authenticator.phone_identifier_field or not self.code:  # user input is email

@@ -278,0 +400,4 @@
+
+
+class PhoneChangeVerifyView(TemplateView):
+    @atomic(savepoint=False)

@@ -599,0 +810,4 @@
+
+        allow_phone_change = getattr(
+            authenticator.phone_identifier_field, 'user_editable', False
+        ) and not getattr(authenticator.phone_identifier_field, 'disabled', True)

@@ -55,2 +55,4 @@
 
 
+class PhoneChangeFormNoPassword(forms.Form):
+    phone = PhoneField(label=_('New email'))

@@ -1378,1 +1593,3 @@
-        )
+        try:
+            Lock.lock_identifier(self.code.phone)
+            token = models.Token.create(